This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/79204255412F26FC4519CA94E35B93EF4E47BC73.mft
File:                     79204255412F26FC4519CA94E35B93EF4E47BC73.mft (raw, json)
Hash identifier:          svQQPb2TbYlZnOhLx6EiD5HqSww1RWDRtN27/9gAlxI=
Subject key identifier:   BA:17:86:A7:15:5B:A9:50:35:EE:31:A3:1A:8D:98:17:C7:8A:3A:A3
Authority key identifier: 79:20:42:55:41:2F:26:FC:45:19:CA:94:E3:5B:93:EF:4E:47:BC:73
Certificate issuer:       /CN=79204255412F26FC4519CA94E35B93EF4E47BC73
Certificate serial:       1599774976168FDF06B635DEDBF468417BE95DFB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79204255412F26FC4519CA94E35B93EF4E47BC73.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/79204255412F26FC4519CA94E35B93EF4E47BC73.mft
Manifest number:          03AD
Signing time:             Mon 08 Dec 2025 02:21:13 +0000
Manifest this update:     Mon 08 Dec 2025 02:16:13 +0000
Manifest next update:     Thu 11 Dec 2025 05:59:13 +0000
Files and hashes:         1: 3130332e3136342e32322e302f32332d3234203d3e203137393935.roa (hash: sTN/8QbT7vMBdY4lWuaimWErVYuLZoinw920451use8=)
                          2: 79204255412F26FC4519CA94E35B93EF4E47BC73.crl (hash: qkxsG/LfTQBgDf4ADDWip673+A+dq4OMHP47007YvE8=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/79204255412F26FC4519CA94E35B93EF4E47BC73.crl
                          rsync://repo-rpki.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/79204255412F26FC4519CA94E35B93EF4E47BC73.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79204255412F26FC4519CA94E35B93EF4E47BC73.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 05:59:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:99:77:49:76:16:8f:df:06:b6:35:de:db:f4:68:41:7b:e9:5d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79204255412F26FC4519CA94E35B93EF4E47BC73
        Validity
            Not Before: Dec  8 02:16:13 2025 GMT
            Not After : Dec 11 05:59:13 2025 GMT
        Subject: CN=BA1786A7155BA95035EE31A31A8D9817C78A3AA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:3b:d5:92:e0:20:f5:f1:86:25:52:f6:31:f4:
                    a7:6a:1f:97:4e:ac:6a:62:ae:b6:75:1c:48:7d:5d:
                    2c:f5:8f:9a:ec:0d:04:26:94:9c:18:0d:4a:49:27:
                    57:83:88:53:7f:8a:f9:7a:3b:72:26:99:a9:84:cc:
                    f2:3e:f9:21:32:62:c7:92:7e:57:e7:22:70:d5:62:
                    10:f1:1d:2a:8e:bf:f3:fb:51:51:47:98:cf:80:10:
                    bb:56:a9:04:fa:fe:bf:3a:50:18:34:00:8e:51:9a:
                    f6:64:82:9b:cc:13:b9:ca:8e:99:af:d4:c6:25:13:
                    28:d0:33:16:34:cb:e9:e1:ca:c3:ad:d1:52:6a:bf:
                    b5:84:82:28:f3:2f:00:ea:d2:c2:03:da:53:7e:6a:
                    79:2e:5f:8d:64:2f:99:62:31:3a:76:e5:bb:c7:01:
                    41:4f:54:97:21:17:90:f6:4e:41:25:dc:9c:e8:e3:
                    08:51:02:de:18:5d:79:15:e9:89:e1:e6:1b:48:32:
                    94:dc:7e:33:cf:f2:57:0b:02:66:45:93:17:4c:ec:
                    2d:8d:cf:fd:6a:1a:de:6f:82:c9:1f:06:43:6a:49:
                    97:1e:4e:a1:61:fb:a3:ea:e5:be:57:8f:85:af:48:
                    2b:93:c3:fe:e3:fe:5d:69:09:03:4c:47:07:73:6e:
                    6d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:17:86:A7:15:5B:A9:50:35:EE:31:A3:1A:8D:98:17:C7:8A:3A:A3
            X509v3 Authority Key Identifier:
                keyid:79:20:42:55:41:2F:26:FC:45:19:CA:94:E3:5B:93:EF:4E:47:BC:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/79204255412F26FC4519CA94E35B93EF4E47BC73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79204255412F26FC4519CA94E35B93EF4E47BC73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/79204255412F26FC4519CA94E35B93EF4E47BC73.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:57:b4:d2:ad:55:b1:64:b0:8f:40:c4:2f:4d:d8:39:af:3b:
         46:8f:c0:24:a2:7a:d8:94:79:d4:ce:1b:50:1b:41:85:32:7d:
         da:10:d2:23:6d:b3:32:f9:ef:fc:3a:43:53:40:f1:b7:d8:82:
         c2:c4:32:f2:f2:01:7b:eb:f1:eb:33:25:8c:30:79:0e:15:37:
         e0:53:e0:12:45:8e:59:bf:db:f7:a9:e1:7e:26:77:36:89:5d:
         c8:ee:f9:ce:0d:81:70:7d:4f:b8:2b:2e:b6:af:8c:36:3a:54:
         a4:c3:e8:5e:a2:3f:f7:23:e4:7d:20:53:f3:b5:b4:38:b0:22:
         f5:5c:ba:58:35:75:69:4c:0d:ab:ec:12:d4:23:df:b8:b7:d4:
         3c:2b:13:32:b5:e8:76:d5:a3:00:d8:68:20:19:9a:ae:18:a1:
         be:01:47:23:10:01:ee:6e:ef:fa:24:ef:20:59:e5:32:da:1a:
         35:d7:54:94:7f:0d:a1:4f:7f:af:b5:1a:1c:ed:bd:cf:00:2b:
         39:5f:2b:da:09:46:0b:f8:5d:ac:a3:75:94:95:08:8f:5d:a5:
         34:af:f9:5b:a0:b6:09:b0:bd:49:e1:d8:e7:85:01:5a:67:a9:
         15:77:12:bc:d2:ae:aa:67:17:3b:11:78:b5:1b:be:ee:e2:85:
         cc:b7:8e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 05:30:20 2025 by rpki-client